Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          pcgoH4LQgHMDr6gPcAwO/BHLm+RRXOE53683IPJ2Seo=
Subject key identifier:   D6:C5:0D:D0:21:69:0A:37:AC:37:43:A4:8B:C6:51:08:BE:2E:6B:B4
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       01A0B49B444646FD2514A69BE24B9C2F0148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1A94
Signing time:             Fri 18 Sep 2026 13:01:09 +0000
Manifest this update:     Fri 18 Sep 2026 13:01:09 +0000
Manifest next update:     Sat 19 Sep 2026 13:01:09 +0000
Files and hashes:         1: 4rHkukJZlmv4as-4xMu4r_3jmNE.roa (hash: +bpTdQ8MOcqEZXfHNxSdTdJOkYSVdHAINcyN0oTieLw=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: EdIpiBrbm64EH6llID08r+2DkMeCtVg5RBsOC7a6m7U=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:9b:44:46:46:fd:25:14:a6:9b:e2:4b:9c:2f:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Sep 18 13:01:09 2026 GMT
            Not After : Sep 19 13:01:09 2026 GMT
        Subject: CN=d6c50dd021690a37ac3743a48bc65108be2e6bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:73:d9:3c:46:ea:dd:3f:2f:c3:d7:c3:69:
                    0c:0e:cf:54:65:ed:27:31:e0:1c:24:55:0c:9c:5c:
                    42:99:0f:5c:3b:61:44:88:f1:be:22:4a:56:e7:6b:
                    96:21:5b:39:2f:ca:97:56:1f:b7:1a:41:34:1c:77:
                    05:3c:0b:ea:e4:2f:6d:66:5c:2a:38:28:7f:fe:30:
                    ca:5f:f9:58:77:1b:0a:14:64:a6:9d:7e:91:32:b2:
                    53:9a:a5:38:ae:ce:ff:7d:be:8c:17:ad:62:7a:05:
                    3d:3c:50:1b:ba:e4:49:c1:a0:71:e2:f2:04:35:d5:
                    4d:53:1c:93:8f:2b:1f:a0:b1:63:28:8e:ea:12:b6:
                    cd:ae:07:31:8b:e4:b1:b1:03:f8:6e:fe:24:5c:2c:
                    54:da:21:50:80:6d:44:de:15:68:13:1a:8c:0b:e2:
                    be:98:fd:f0:b8:10:6b:0d:67:be:52:6d:0e:2a:cc:
                    6b:4c:43:6c:1b:a6:f6:0d:0b:e2:2f:13:81:cf:4f:
                    80:ff:14:82:6b:e9:60:48:89:7d:6c:fc:56:32:3e:
                    97:af:c2:c3:1a:ff:d4:c9:96:82:c3:3c:1d:47:03:
                    99:b2:e0:b1:d9:57:0e:a3:17:59:38:49:76:7e:54:
                    e0:4f:ad:59:a3:b6:63:41:14:16:12:2f:64:85:0d:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:0D:D0:21:69:0A:37:AC:37:43:A4:8B:C6:51:08:BE:2E:6B:B4
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:2f:ce:f7:8d:49:4f:66:54:5d:51:22:b0:2f:12:8d:93:
         c6:8a:71:83:00:b6:6f:f4:f7:f2:e4:5f:d1:5b:5f:9d:d9:b1:
         bb:8d:f0:90:ec:20:48:a5:be:08:71:8e:84:f3:17:30:bc:1b:
         cc:38:b3:64:73:e0:02:6c:63:43:b6:a6:ac:be:75:74:fb:4b:
         bb:8a:d5:cb:9a:25:c2:f2:f0:0d:1e:5c:ae:b4:e7:fd:fb:43:
         65:eb:35:8b:3a:fa:9f:af:f4:02:cd:e4:8c:14:64:16:15:8e:
         f5:f9:b1:ca:08:b2:46:f0:c7:9c:c7:62:f2:6b:8c:7e:a5:2b:
         5d:61:98:85:fa:41:7b:2b:ac:c3:18:fe:41:5a:b5:8c:1a:54:
         18:58:1a:2e:bd:65:f5:63:47:c7:e3:e4:41:64:76:7a:35:7e:
         23:8b:c0:df:74:24:8d:cb:d8:b9:76:b3:de:19:a4:07:9b:23:
         1c:f1:9e:f1:20:ee:85:e3:4a:cc:85:4b:1c:04:8b:62:2b:73:
         0b:69:31:d5:89:f2:79:ff:6b:0e:3d:ba:e9:11:f9:be:49:c8:
         f8:e9:e7:3d:12:95:e6:be:3a:5b:9c:35:0e:f4:2a:1d:1f:47:
         76:1a:b7:bc:85:0b:44:7c:4a:dc:5c:f4:a6:2d:c2:22:5f:82:
         99:cc:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:24:45 2026 by rpki-client